bc11 Privacy Policy

1 Introduction

bc11 ("bc11", "we", "us" or "our") is the operator of the online betting and casino platform accessible at https://bc11.io. We are committed to protecting the privacy and personal data of all individuals who interact with our platform, whether as registered players, prospective users, or casual visitors.

This Privacy Policy sets out, in clear and accessible language, the categories of personal data we collect, the purposes for which that data is processed, the legal bases on which we rely, the third parties with whom we may share data, the security measures we employ to protect it, the length of time we retain it, and the rights you hold in relation to your own data.

This policy should be read alongside our Terms & Conditions (https://bc11.io/terms-conditions) and our Responsible Gaming policy (https://bc11.io/responsible-gaming), both of which are incorporated by reference. Where a conflict arises between this Privacy Policy and any other document, this Privacy Policy shall prevail with respect to data protection matters.

The version of this policy currently published at https://bc11.io/privacy-policy is the operative version. The Effective Date shown at the top of this page indicates when the current version came into force.

2 Data We Collect

bc11 collects personal data through multiple channels, including direct registration, platform use, payment processing, and automated technical means. The categories of data we may collect are described below.

2.1 Registration and Identity Data

When you register a bc11 account, we collect the following information:

• Full legal name
• Date of birth (used to verify that you meet the minimum age requirement of 21 years)
• Residential address (city, district, and country — typically Bangladesh)
• Email address
• Mobile phone number
• Preferred username

2.2 KYC Verification Data

As part of our mandatory Know Your Customer (KYC) programme, we collect identity verification documents, which may include:

• A copy of a government-issued photo identification document (National Identity Card, passport, or driving licence)
• A selfie photograph taken during the live verification process
• Proof of the payment method used (e.g., a screenshot of the registered bKash or Nagad account)
• Proof of address (e.g., utility bill, bank statement) where required
• Source-of-funds documentation in cases where our compliance team deems it necessary

2.3 Financial Transaction Data

To process deposits and withdrawals, we collect and record:

• Payment method type (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, Mastercard, USDT, BTC)
• Transaction amounts in BDT or cryptocurrency equivalent
• Transaction reference numbers and timestamps
• Wallet addresses (for cryptocurrency transactions)
• Mobile financial service (MFS) account numbers associated with bKash, Nagad, Rocket and Upay payments

bc11 does not store full payment card numbers. Card payment processing is handled by PCI DSS-compliant third-party payment processors who operate under their own privacy frameworks.

2.4 Gameplay and Betting Data

We maintain detailed logs of all activity conducted on your bc11 account, including:

• All bets placed, games played and sports events wagered on
• Stake amounts, odds accepted, and settlement outcomes
• Bonus and promotional activity, including wagering progress
• Responsible gaming tool usage (deposit limits set, time-out periods activated, self-exclusion requests)
• Session durations and login timestamps

2.5 Technical and Device Data

When you access bc11 via a web browser or mobile device, we automatically collect certain technical data:

• IP address and approximate geographic location derived from IP
• Browser type and version, operating system, and device type
• Referring URL (the page you were on before visiting bc11)
• Pages visited within bc11 and time spent on each
• Cookie identifiers and session tokens (see Section 7)

2.6 Communications Data

If you contact bc11's support team via live chat or email, we retain records of those communications, including the content of messages, timestamps, and the outcome of any support ticket or complaint. This data is used for quality assurance, staff training, and dispute resolution purposes.

2.7 Data Collected About Third Parties

bc11 collects data only about the individual who is registering or using the platform. We do not collect data about third parties unless that data is voluntarily submitted as part of a support request or complaint. If you submit information about a third party (e.g., reporting suspicious activity by another player), you warrant that you have the right to do so and that the information is accurate to the best of your knowledge.

3 How We Use Your Data

bc11 uses the personal data we collect for the following purposes:

bc11 does not use your personal data for targeted advertising or for building behavioural advertising profiles that are shared with third-party advertisers.

4 Legal Basis for Processing

For each purpose for which we process your personal data, bc11 relies on one or more of the following legal bases:

• Contractual Necessity: Processing that is necessary to perform the contract between you and bc11 — i.e., to operate your account, process transactions, and provide access to games and betting markets.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering legislation, age verification requirements, and financial record-keeping regulations.
• Legitimate Interests: Processing carried out in pursuit of bc11's legitimate business interests, including fraud prevention, platform security monitoring, improving services, and enforcing our Terms & Conditions. We apply a balancing test to ensure our legitimate interests do not override your fundamental rights and freedoms.
• Consent: Where we rely on consent as a legal basis (for example, for certain optional communications), you may withdraw that consent at any time by contacting us at [email protected] or by updating your communication preferences in your account dashboard. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5 Data Sharing and Disclosure

bc11 does not sell, rent or trade your personal data. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

5.1 Payment Processors and Financial Partners

To process deposits and withdrawals, we share necessary transaction data with our payment processing partners, which include providers supporting bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, Mastercard, and cryptocurrency networks. These partners are contractually bound to process data only for the purpose of completing your transaction and are prohibited from using it for any other purpose.

5.2 KYC and Identity Verification Providers

bc11 uses third-party KYC verification platforms to cross-reference the identity documents you submit against authoritative databases. These providers process your identity data strictly for verification purposes and are required to maintain equivalent data security standards to our own.

5.3 Fraud Prevention and Security Services

We share technical data (including IP addresses, device fingerprints and behavioural signals) with specialist fraud prevention and cyber-security service providers who help us identify and prevent account takeovers, payment fraud, and bot activity on the bc11 platform.

5.4 Legal and Regulatory Authorities

bc11 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by applicable law, or where disclosure is necessary to protect the rights, property or safety of bc11, its players, or the public. We will notify you of any such disclosure where we are legally permitted to do so.

5.5 Business Transfers

In the event that bc11 undergoes a merger, acquisition, restructuring, or sale of all or part of its business, your personal data may be transferred to the successor entity as part of that transaction. We will notify registered players of any such transfer and of any material changes to data processing that result from it.

5.6 Aggregated and Anonymised Data

bc11 may share aggregated, anonymised statistical data (from which no individual player can be identified) with business partners, analytics providers, or for publication purposes. This data does not constitute personal data and is not subject to the restrictions set out in this policy.

6 Data Retention

bc11 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to backup cycles, data is isolated from active processing until it can be securely destroyed.

7 Cookies and Tracking Technologies

bc11 uses cookies and similar technologies (including local storage objects and session tokens) on our platform. This section explains what we use, why, and how you can manage your preferences.

7.1 What Are Cookies?

Cookies are small text files placed on your device by a web server when you visit a website. They allow the website to recognise your device on subsequent visits and to store certain preferences or session state. Cookies cannot execute code and cannot be used to deliver viruses or malware.

7.2 Types of Cookies We Use

7.3 What We Do Not Use

bc11 does not use third-party advertising cookies, retargeting pixels, social media tracking pixels, or any technology designed to build a behavioural advertising profile linked to your identity and shared with external ad networks.

7.4 Managing Cookies

You may control and manage cookies through your browser settings. Most modern browsers allow you to refuse all cookies, accept only certain types, or delete existing cookies. Please note that disabling strictly necessary cookies will prevent you from logging into your bc11 account and will impair core platform functionality. Disabling functional or analytics cookies may reduce personalisation features but will not prevent you from using bc11.

8 Data Security

bc11 implements a layered data security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• Transport Encryption: All data exchanged between your browser or device and bc11's servers is encrypted using TLS 1.2 or higher. Our site is HTTPS-only; unencrypted HTTP connections are automatically redirected.
• Password Security: User passwords are never stored in plain text. We apply industry-standard one-way hashing algorithms with per-user salting so that even in the unlikely event of a data breach, passwords cannot be reversed.
• Two-Factor Authentication (2FA): Registered players are encouraged to enable 2FA on their bc11 accounts. 2FA provides a significant additional layer of protection against unauthorised login attempts.
• Access Controls: Access to personal data within bc11's internal systems is restricted on a strict need-to-know basis. Staff who handle player data undergo regular data protection training and are bound by confidentiality obligations.
• Vulnerability Management: bc11's technical infrastructure is subject to regular security assessments, including automated vulnerability scanning and periodic penetration testing by qualified security professionals.
• Incident Response: bc11 maintains a documented data breach response plan. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify affected players without undue delay and take immediate remedial action.

9 Your Data Rights

As an individual whose personal data is processed by bc11, you hold the following rights. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered username and email address so we can verify your identity.

• Right of Access: You may request a copy of all personal data that bc11 holds about you, together with information about the purposes for which it is processed, the categories of data held, and the recipients with whom it has been shared. We will provide this information within 30 days of receiving a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Many basic account details (such as email address and phone number) can be updated directly from your account dashboard without needing to contact support.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other legal basis exists, or where the data has been processed unlawfully. Note that this right is subject to our legal obligation to retain certain data (see Section 6). Where we cannot fulfil an erasure request in full, we will explain which data must be retained and why.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified, or while an objection you have raised is being assessed.
• Right to Data Portability: Where we process your data on the basis of consent or contractual necessity, you may request a copy of your personal data in a structured, commonly used, machine-readable format (e.g., JSON or CSV), which you may then transfer to another service provider.
• Right to Object: You may object to processing based on our legitimate interests at any time. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where the processing is necessary for the establishment, exercise or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

bc11 will respond to all verified data rights requests within 30 days. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it. There is no charge for a first data rights request within any 12-month period.

10 Children's Privacy and Age Restriction

bc11 is an online gambling platform. Access is strictly limited to individuals who are at least 21 years of age. We do not knowingly collect personal data from anyone under the age of 21, and we do not permit anyone under 21 to register an account, make a deposit, or participate in any betting or gaming activity on the platform.

Age verification is conducted during the KYC process and may be requested at any point during the account lifecycle. If we become aware — through our internal processes, a third-party report, or any other means — that an account is held by or has been accessed by a person under 21, we will suspend the account immediately, retain only the data necessary to support our investigation, and return any deposited funds via the original payment method. We will then permanently close the account and delete or anonymise all remaining data to the extent permitted by our legal retention obligations.

Parents or guardians who believe a minor may have accessed bc11 are encouraged to contact us immediately at [email protected]. We treat reports of underage access with the highest priority and will act on all such reports within 24 hours of receipt.

11 Cross-Border Data Transfers

bc11 primarily serves players located in Bangladesh and processes the majority of personal data within infrastructure located in or near the South Asia region. However, some of our third-party service providers (including KYC verification platforms, fraud prevention services, and cloud infrastructure providers) may process data in jurisdictions outside Bangladesh.

Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that applicable in Bangladesh, bc11 implements appropriate safeguards to ensure your data remains protected. These safeguards include contractual clauses that impose data protection obligations on the recipient that are equivalent to those we ourselves are bound by, and technical measures such as encryption of data in transit and at rest.

By using bc11 and providing your personal data, you acknowledge that your data may be transferred to and processed in jurisdictions outside Bangladesh as described in this section. If you have questions about specific cross-border transfer arrangements, please contact us at [email protected].

12 Third-Party Links

The bc11 platform does not contain links to external third-party websites. In the event that any informational content on the platform references an external source by name (for example, the name of a game studio such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), bc11 is not responsible for the privacy practices of those organisations. If you independently visit those organisations' websites, their own privacy policies will apply to any data they collect from you.

bc11 encourages all players to read the privacy policies of any third-party service they interact with, including the mobile financial service providers they use to make deposits and withdrawals (e.g., bKash, Nagad, Rocket, Upay).

13 Changes to This Privacy Policy

bc11 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, new product features, changes in applicable law, or feedback from players. When we make a material change to this policy — meaning a change that significantly affects how we process your personal data — we will notify registered players by email to the address on file at least 14 days before the updated policy comes into effect.

Non-material changes (such as typographical corrections, clarifications of existing language, or restructuring for readability without changing substance) may be published without advance notice. The "Effective Date" at the top of this page will always reflect the date of the most recently published version.

Your continued use of bc11 after the Effective Date of any updated version of this policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you should close your account and withdraw any remaining balance before the updated policy takes effect. Account closure requests can be submitted via live chat or by emailing [email protected].

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to bc11's data processing practices generally, please contact our support team using the details below. All data-related correspondence should include your registered username and the email address associated with your bc11 account so we can verify your identity before processing your request.

Email (plain text — not a clickable link):

[email protected]

Subject line for data rights requests: "Data Rights Request"

Subject line for general privacy queries: "Privacy Policy Enquiry"

Live chat: Available 24/7 via your bc11 account dashboard. Average response time: 2–5 minutes.

We aim to acknowledge all written privacy enquiries within 2 business days (Bangladesh Standard Time, UTC+6) and to resolve or formally respond to all substantive requests within 30 calendar days.